הבקשה
“A zero-trust network with Internet through SASE and SD-WAN to an edge router and perimeter firewall, a DMZ web server, a core switch and data center server, plus an internal firewall, microsegmentation firewall and access switch for a user PC, laptop and Wi-Fi access point.”
ואז נסוAdd an identity provider connected to the SASE cloud.Add a protected database behind the internal firewall.
מה מופיע בתרשים הזה
פענחו את ההחלטות שמאחוריו.
01
Place SASE gateway at edge for secure internet and WAN access
02
Implement microsegmentation firewall to isolate access layer from core
03
Use VLANs to separate DMZ, user, and wireless traffic
When designing or documenting a zero-trust network architecture that leverages SASE and network segmentation for enhanced security.